Tag

actions-setup-node

Safeguard articles tagged "actions-setup-node" — guides, analysis, and best practices for software supply chain and application security.

1 article

DevSecOps

Securing actions/setup-node in Your CI Pipeline

The actions/setup-node step looks harmless, but pinning, caching, and registry auth choices decide whether it becomes a supply chain foothold. Here is how to harden it.

Apr 17, 20256 min read